CyberSec.Space Logo
返回 CVE 浏览器

CVE-2017-15988

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1330%
EPSS Percentile7.38th
Published2017年10月31日
Last Modified2026年5月13日

Vulnerability Description

Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525.

Affected Platforms (CPE)

📦
Nicephpscripts

Nice Php Faq Script

All versions

References & Advisories

🔗 https://www.exploit-db.com/exploits/43071/
🔗 https://www.exploit-db.com/exploits/43071/

相关漏洞威胁

CVE-2008-65257.5

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to execute a...

CVE-2017-232010.0

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenti...

CVE-2017-362310.0

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC). For supported versions tha...

CVE-2017-811010.0

www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php.